My Product2025Security & EncryptionFeatured

VaultShield.NET - Enterprise File Encryption Solution

A cross-platform, enterprise-grade file encryption solution with military-standard AES-256-GCM encryption. Features zero-knowledge architecture, multi-cloud storage support (Google Drive, S3, SFTP, WebDAV), and ultra-high performance optimization for files up to 200GB+. Built with .NET 8 and MAUI for Windows, macOS, and Linux.

View Source Code

43 C# source files

files

6 storage backends

storage

170+ MB/s throughput

performance

Technical Implementation

Built with .NET 8 and MAUI, featuring 4 tiered encryption services optimized for different file sizes. Implements AES-256-GCM (FIPS 140-2 compliant) with Argon2id key derivation for GPU/ASIC-resistant password protection. The LargeFileEncryptionService uses producer-consumer patterns with channels, memory-mapped files, and parallel chunk processing to achieve 170+ MB/s throughput with bounded memory usage (<512MB) regardless of file size. Features a sophisticated storage abstraction layer supporting 6 different backends with unified async API.

Key Features

AES-256-GCM encryption with FIPS 140-2 Level 1 compliance

Argon2id key derivation - memory-hard, GPU/ASIC attack resistant

Zero-knowledge architecture - encryption keys never leave the client

4 tiered encryption services: Basic, High-Performance, Streaming, Large File

Ultra-large file support (10GB - 200GB+) with parallel chunk processing

Hardware acceleration with AES-NI support for maximum throughput

Memory-mapped files for files > 500MB with bounded memory usage

Multi-cloud storage: Google Drive, S3-Compatible, SFTP, FTP, WebDAV

Vault management with password-protected master key encryption

Real-time progress tracking with throughput metrics

Cancellation token support for long-running operations

Secure memory clearing with explicit zeroing of sensitive data

Cross-platform support: Windows, macOS, Linux via .NET MAUI

Architecture & Patterns

Layered Architecture: Presentation → Application → Domain → Infrastructure

Factory Pattern for encryption service selection based on file size

Strategy Pattern with 4 interchangeable encryption services

Repository Pattern with IStorageProvider abstraction for storage access

Producer-Consumer Pattern using System.Threading.Channels for large files

Async/Await first design with comprehensive cancellation support

Buffer pooling with ArrayPool<byte> for reduced GC pressure

Dependency Injection for service composition and testability

Custom exception hierarchy with security context information

Adaptive chunk sizing: 4MB, 16MB, 32MB, 64MB based on file size

Project Highlights

Military-grade AES-256-GCM encryption (FIPS 140-2 compliant)170+ MB/s throughput for large files with parallel processingBounded memory ceiling (<512MB) regardless of file sizeZero-knowledge architecture - server never sees encryption keys6 unified storage backends with single abstraction layerArgon2id password derivation resistant to GPU/ASIC attacksMemory-mapped I/O for ultra-large file handlingSIMD and AES-NI hardware acceleration supportComprehensive documentation with 8 detailed markdown guides

Technology Stack

.NET 8.NET MAUIBouncyCastleArgon2AES-256-GCMGoogle Drive APIAWS S3SSH.NETFluentFTPWebDAVxUnitSystem.Text.Json

Interested in This Project?

Let's discuss how I can help bring similar solutions to your business.

Get in Touch View All Projects